dependabot[bot] opened a new pull request, #7749: URL: https://github.com/apache/myfaces-tobago/pull/7749
Bumps [org.glassfish:jakarta.faces](https://github.com/eclipse-ee4j/mojarra) from 4.0.27 to 4.0.28. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse-ee4j/mojarra/releases";>org.glassfish:jakarta.faces's releases</a>.</em></p> <blockquote> <h2>4.0.28 has been released</h2> <ul> <li>Maven Central: <a href="https://repo1.maven.org/maven2/org/glassfish/jakarta.faces/4.0.28/";>https://repo1.maven.org/maven2/org/glassfish/jakarta.faces/4.0.28/</a></li> <li>Milestone: <a href="https://github.com/eclipse-ee4j/mojarra/milestone/93?closed=1";>https://github.com/eclipse-ee4j/mojarra/milestone/93?closed=1</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Reuse SecureRandom, Cipher and Mac in the byte array guards by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6054";>eclipse-ee4j/mojarra#6054</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/6045";>#6045</a>: initialize Mojarra once when ConfigureListener is declared twice by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6055";>eclipse-ee4j/mojarra#6055</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/6057";>#6057</a>: escape supplementary characters, forXml and script URLs by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6058";>eclipse-ee4j/mojarra#6058</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/6060";>#6060</a>: keep recorded order of pruned dynamic actions by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6061";>eclipse-ee4j/mojarra#6061</a></li> <li>Log failed state MAC check as warning instead of printing to stderr by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6062";>eclipse-ee4j/mojarra#6062</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/6063";>#6063</a>: log configuration failures, remove dead code and swallowed test exceptions by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6064";>eclipse-ee4j/mojarra#6064</a></li> <li>Run testAttachedObjectsCount in UIComponentBaseAttachedStateTestCase by <a href="https://github.com/sharanggupta";><code>@sharanggupta</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6066";>eclipse-ee4j/mojarra#6066</a></li> <li>Don't save response encoding in view state unless f:view encoding is an expression by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6071";>eclipse-ee4j/mojarra#6071</a></li> <li>Don't decode client side state to determine whether a view is stateless by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6073";>eclipse-ee4j/mojarra#6073</a></li> <li>Treat f:view encoding expression without value as absent encoding by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6074";>eclipse-ee4j/mojarra#6074</a></li> <li>Read back unencrypted client state, and honor disabling encryption only in Development by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6072";>eclipse-ee4j/mojarra#6072</a></li> <li>Let a tag file body fall back to the scope at its insertion by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6077";>eclipse-ee4j/mojarra#6077</a></li> <li>Give the implicit panel of a multi component facet a seeded id by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6079";>eclipse-ee4j/mojarra#6079</a></li> <li>Keep the variables of a decoration template inside the decoration by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6080";>eclipse-ee4j/mojarra#6080</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/sharanggupta";><code>@sharanggupta</code></a> made their first contribution in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/6066";>eclipse-ee4j/mojarra#6066</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/eclipse-ee4j/mojarra/compare/4.0.27-RELEASE...4.0.28-RELEASE";>https://github.com/eclipse-ee4j/mojarra/compare/4.0.27-RELEASE...4.0.28-RELEASE</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/784a141dbbf04b77dd71f3962d1b4ef278fb2a6b";><code>784a141</code></a> Prepare release 4.0.28</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/8da96565100fcc621accab4e0401cf0ebc7e93a1";><code>8da9656</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/6080";>#6080</a> from eclipse-ee4j/issue_6078</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/5d75725d793eba0bb4c3fb743d74ca323bf240ae";><code>5d75725</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/6079";>#6079</a> from eclipse-ee4j/issue_6075</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/68a733bb408cd288e8767e41d7f70e6741acc4d8";><code>68a733b</code></a> Keep the variables of a decoration template inside the decoration</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/cad98ed81a04bb93b295fcea871a3e395c934ce2";><code>cad98ed</code></a> Test the implicit facet panel id in a larger facet region</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/d4b8e2e5161400cc027b66090ebdbd361b8cbbaf";><code>d4b8e2e</code></a> Give the implicit panel of a multi component facet a seeded id</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/c3e26fddbf933f794163b00954f1c9ed09b474ec";><code>c3e26fd</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/6077";>#6077</a> from eclipse-ee4j/issue_6076</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/3d05d51e488d80111b124f8ec1762f85ad2ef1ae";><code>3d05d51</code></a> Clarify the enableStrictTagFileBodyClosure description</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/8cd34531a749fc62877c7030b533ebb82be2b0d0";><code>8cd3453</code></a> Let a tag file body fall back to the scope at its insertion</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/605cd47d2aa38fcfd061244023b9d279b09dd1b4";><code>605cd47</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/6072";>#6072</a> from eclipse-ee4j/issue_6067</li> <li>Additional commits viewable in <a href="https://github.com/eclipse-ee4j/mojarra/compare/4.0.27-RELEASE...4.0.28-RELEASE";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
